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0^ ' Abstract 

■ In this paper, a technique on constructing nonlinear resilient Boolean functions is described. 

By using several sets of disjoint spectra functions on a small number of variables, an almost 
optimal resilient function on a large even number of variables can be constructed. It is shown 
that given any m, one can construct infinitely many n- variable (n even), m-resilient functions 
with nonlinearity > 2 n_1 — 2 n ^ 2 . A large class of highly nonlinear resilient functions which 
were not known are obtained. Then one method to optimize the degree of the constructed 
functions is proposed. Last, an improved version of the main construction is given. 

Keywords: Stream cipher, Boolean function, Algebraic degree, disjoint spectra functions, 
nonlinearity, resiliency, 
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, Q, - 1 Introduction 

. Boolean functions are used as nonlinear combiners or nonlinear niters in certain models of stream 

^ ' cipher systems. In the design of cryptographic Boolean functions, there is a need to consider a 

multiple number of criteria simultaneously. The widely accepted criteria are balancedness, high 
nonlinearity, high algebraic degree, and correlation immunity of high order (for balanced functions, 
. correlation immunity is referred to as resiliency). 

By an (n, m, d, Nf) function we mean an n- variable, m-resilient (order of resiliency m) Boolean 
function / with algebraic degree d and nonlinearity Nf. 

Unfortunately all the criteria above cannot be maximized together. For n even, the most 
notable example is perhaps bent functions [19]. Achieving optimal nonlinearity 2™~ 1 — 2™/ 2 ~ 1 , 
bent functions permit to resist linear attacks in the best possible way. But they are improper for 
cryptographic use because they are neither balanced nor correlation-immune and their algebraic 
degrees are not more than n/2. When concerning the order of resiliency, Siegenthaler [28] and 
Xiao [31] proved that d < n — m — 1 for m-reslient Boolean functions. Such a function, reaching 
this bound, is called degree-optimized. 

For the reasons above, it is more important to construct those degree-optimized resilient 
Boolean functions which have almost optimal (large but not optimal) nonlinearity, say between 
2"-i _ 2™/ 2 anc [ — when n is even. This is also what we do in this paper. 

We now give a summary of earlier results that are related to our work. 

1) To obtain nonlinear resilient functions, a modification of the Maiorana-McFarland (M-M) 
construction of bent functions (cf. [5]) by concatenating the small affine functions was first employed 
by Camion et al [1] and later studied in [27], [3], [21]. The nonlinearity of n- variable M-M resilient 
functions cannot exceed 2 n_1 — 2 L"-/ 2 J _ The M-M technique in general does not generate degree- 
optimized functions and the M-M functions are potentially cryptographically weak [2] , [9] . 

2) An interesting extension of the M-M technique has been made by Carlet [2], where the con- 
catenation of affine functions is replaced by concatenation of quadratic functions. In general, these 
constructed functions can not be degree-optimized, and the other parameters such as nonlinearity 
and resiliency are not better than those of the M-M functions. 

3) Pasalic [17] presented a revised version of the M-M technique to obtain degree-optimized re- 
silient functions. The modification is simple and smart but the nonlinearity value of the constructed 
functions is at most 2"" 1 - 2 L^/2J _ 
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4) Sarkar and Maitra [21] indicated that for each order of resiliency m, it is possible to find an 
even positive integer n to construct an (n,m,n — m — l,Nf) function / with Nf > 2" _1 — 2 n / 2 . 
They showed that for even n > 12, the nonlinearity of 1-resilient functions with maximum possible 
algebraic degree n — 2 can reach 2™ _1 — 2"/ 2 ~ 1 — 2"/ 2 ~ 2 — 2"/ 4 ~ 2 — 4. It was further improved due 
to the method proposed by Maitra and Pasalic [12]. Thanks to the existence of the (8, 1, 6, 116) 
functions, an (n, 1, n - 2, N f ) function / with N f = 2 n ~ 1 - 2™/ 2 - 1 - 2™/ 2 - 2 - 4 could be obtained, 
where n > 10. 

5) Seberry et al. [26] and Dobbcrtin [6] independently presented constructions of highly non- 
linear balanced Boolean functions by modifying the M-M bent functions. To obtain an n-variable 
balanced function, they concatenated 2™/ 2 — 1 nonconstant distinct n/2-variable linear functions 
and one n/2-variable modified M-M class highly nonlinear balanced Boolean function which can 
be constructed in a recursive manner. These constructed functions attain the best known nonlin- 
earity for n-variable (n even) balanced functions. Unfortunately, these functions are not 1-resilient 
functions. 

6) To obtain m-resilient functions with nonlinearity > 2™ _1 — 2"/ 2 ~ 1 — 2"/ 2 ~ 2 for n even and 
n > 14, Maitra and Pasalic [11] applied the concatenation of 2™ / ' 2 — 2 fe distinct linear m-resilicnt 
functions on n/2 variables together with a highly nonlinear resilient function on n/2 + k variables. 
Moreover, they have provided a generalized construction method for m-resilient functions with 
nonlinearity 2"- 1 - 2"/ 2 - 1 - 2"/ 2 ~ 3 - 2™/ 2 ~ 4 for all n > 8m + 6. For sufficiently large n, it is 
possible to get such functions with nonlinearity w 2™~ 1 — 2™/ 2 ~ 1 — |2 n//2 ~ 2 . And it is the upper 
bound on maximum possible nonlinearity under their construction method. 

7) Computer search techniques have played an important role in the design of cryptographic 
Boolean functions in the last ten years [14], [16], [15], [4]. For a small number of variables, Boolean 
functions with good cryptographic parameters could be found by using heuristic search techniques 
[12], [20], [8]. However, search techniques cannot be used for functions with a large number of 
variables at present. 

8) During the past decade, the most infusive results on the design of cryptographic Boolean 
functions were centered on finding small functions with desirable cryptographic properties. When it 
comes to constructing large functions, people used recursive constructions [29] , [30] , [7] besides the 
M-M construction and its revised (extended) versions. With the rapid development of integrated 
circuit technique, Boolean functions with large number of variables can be easily implemented in 
hardware [22]. 

In this paper we propose a technique to construct high nonlinear resilient Boolean functions 
on large even number of variables (n > 12). We obtain a large class of resilient Boolean functions 
with a nonlinearity higher than that attainable by any previously known construction method. 

The organization of this paper is as follows. In Section II, the basic concepts and notions are 
presented. In Section III, we present a method to construct a set of "disjoint spectra functions" 
by using a class of "partially linear functions" . Our main construction is given in Section IV. A 
method for constructing resilient functions on large even number of input variables is proposed. 
We show that all the constructed functions are almost optimal. In Section V, the degrees of the 
constructed functions are optimized. In Section VI, an improved version of the main construction 
is given. Finally, Section VII concludes the paper with an open problem. 

2 Preliminary 

To avoid confusion with the additions of integers in R, denoted by + and Sj, we denote the 
additions over F 2 by © and (J^. For simplicity, we denote by + the addition of vectors of F£ . A 
Boolean function of n variables is a function from F 2 into F 2 , and we denote by B n the set of all 
Boolean functions of n variables. A Boolean function f(X n ) £ B n , where X n = (xi, • • • , x n ) £ F 2 , 
is generally represented by its algebraic normal form (ANF) 

n 

f(X n )= \u([[x?) (1) 

uGFJ i=l 

where A„ £ F 2 and u = (m, ■ ■ ■ ,«„). The algebraic degree of f(X n ), denoted by deg(f), is the 
maximal value of wt(u) such that A„ ^ 0, where wt(u) denotes the Hamming weight of u. A 
Boolean function with deg(f) < 1 is said to be affine. In particular, an affinc function with 
constant term equal to zero is called a linear function. Any linear function on F!? is denoted by 

UJ ■ X n = LUxXl © • • • LO n X n 
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where to — (uii, • • • , u n ) G F 2 . The Walsh spectrum of / G B n in point u) is denoted by Wf(u) and 
calculated by 

W f (w)= (-l) /(x " )ffi "- x ". (2) 

/ G B n is said to be balanced if its output column in the truth table contains equal number of O's 
and l's (i.e. W/(0) = 0). 

In [31], a spectral characterization of resilient functions has been presented. 

Lemma 1: An n- variable Boolean function is m- resilient if and only if its Walsh transform 
satisfies 

W f {uo) = 0, for < wt{uj) < m, w G F 2 \ (3) 
The Hamming distance between two n- variable Boolean functions / and p is denoted by 

d(f,p) = {X n G F 2 l : f(X n ) p(X n )}. 

The set of all affine functions on F 2 is denoted by A(n). The nonlincarity of a Boolean function 
/ G B n is its distance to the set of all affine functions and is defined as 

N f = mm (d(f,p)). 

peA(n) 

In term of Walsh spectra, the nonlinearity of / is given by [13] 

AT / = 2"- 1 -l. max \W f (u)\. (4) 



Parseval's equation [10] states that 



and implies that 



£(W)(a;)) 2 = 2 2 " (5) 



The equality occurs if and only if / G B n are bent functions, where n is even. 

Bent functions can be constructed by the M-M method. The original M-M functions are defined 
as follows: for any positive integers p, q such that n = p + q, an M-M function is a function / G B n 
defined by 

f(Y q ,X p )=4>(Y q ).X p ®Tr(Y q ), X p e¥^Y q e¥ q 2 (6) 

where <fr is any mapping from F 2 to F 2 and 7r G B q . When n is even, p=q=n/2, and <fr is injective, 
the M-M functions are bent. Certain choices of <f> can easily yield bent functions with degree n/2. 
For the case of n = 2, / G B2 is bent if and only if deg(f) = 2. 

The M-M construction is in essence a concatenation of affine functions. The following definition 
shows a more general approach to obtain a "large" Boolean function by concatenating the truth 
tables of any small Boolean functions. 

Definition 1: Let Y q G F|, X p G F 2 , and p, q be positive numbers with p + q = n. f G B n is 
called a concatenation of the functions in the set G — {gb \ b G F 2 } C B p if 

f(Y q ,X p ) = Q)Y q b .g b (X p ), (7) 

where the notation Y q is defined by 

Y b _ / 1 if Y q = b 
1 \ if Y q ± b. [ ' 

Theorem 2 in [28] allows us to verify that the following lemma is true. 

Lemma 2: With the same notation as in Definition 1, if all the functions in G are m-resilient 
functions, then / is an m-resilient function. 

From now on, we will focus on highly nonlinear resilient Boolean functions with an even number 
of variables in the following sense. 

Definition 2: Let n > 4 be even. / G B n is said to be almost optimal if 

2 n-i _ 2 ™/2 <N f < 2"" 1 - 2™/ 2 - 1 . (9) 
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3 A Large Set of Disjoint Spectra Functions 

Disjoint spectra functions will play an important role in constructing almost optimal resilient 
functions in this paper. 

Definition 3: A set of Boolean functions {g\, 52, • ■ ■ , <7e} C B p such that for any aEF', 

W m (a)-W gj (a) = 0, l<i<j<e (10) 

is called a set of disjoint spectra functions. 

The idea that two Boolean functions with disjoint spectra can be used to construct highly 
nonlinear resilient functions was clearly mentioned in [18], and it was also used in [29], [7], [12]. In 
this section, we provide a simple construction method for a large set of disjoint spectra functions 
by using a set of "partially linear" functions. 

As a family of special resilient functions, partially linear functions were firstly considered by 
Siegenthaler [28]. Here is the definition of such functions. 

Definition 4-' Let t be a positive integer and ■ ■ ■ , it} U {it+i, • • • , ip} = {1, • • • ,p}- Let 
X p = {x u ■■■ ,x p ) 6 Fg, X' t = {x ilt - ■ ■ ,x h ) G F* and X' p '_ t = {x it+1 ,- ■ ■ ,x ip ) G F%~*. For any 
c £ F5,, j c 6 Bp is called a fth-order partially linear function if 

g c {X p )=c-X' t @h c {X';_ t ) (11) 

where h c G B p -t- 

Now we use partially linear functions to construct a set of disjoint spectra functions. 

Lemma 3: With the same notation as in Definition 4, a set of tth-order partially linear functions 

T = {g c {X p ) =c-X[® h c (X';_ t ) I c e F* } (12) 

is a set of disjoint spectra functions. 

Proof: Let a = (8, 9) e Fj, where 8 e F* and 6 e For any g c G T, 



Ba-X p 

^2 (-i) (c+<5) - x * ffi(/i <= (x p-* )ffif, - x p-* ) 

J2 (_i)( c +*)-^ v (-i)(M x P-*)® e - x P-t) 



E (-i) (c+5) ' x M -WhM (13) 



We have 



W ^ = {%.W hM llil. ^ 
For any g c > G T ', c' ^ c, we have 

W Sc (a)-W Sc ,(a)=0. 

According to Definition 3, T is a set of disjoint spectra functions. 

Disjoint spectra functions (partially linear functions) will be used as the "components" to 
construct almost optimal resilient Boolean functions in this paper. 

Open Problem: Construct a large set of disjoint spectra functions which are not (linearly 
equivalent to) partially linear functions. 

4 Main Construction 

This section presents a method for constructing resilient Boolean functions with very high nonlin- 
earity. The algebraic degrees of the functions are also given. 
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Construction 1: Let n > 12 be an even number, m be a positive number, and (ai, • • • , a s ) G F| 
such that 

n/2 , ,„ N s / n/2-2fc . ,„ \ 

£ " £ " " W (15) 

j=m+l ^ J ' fc=l V j=m+l ^ 7 ' y 

where s = — 2m — 2)/4J. Let X n / 2 = {x\, ■ ■ ■ ,x n / 2 ) G F^ 2 , X' t = (xi, • ■ • ,x t ) G F|, and 
^2fc = fat+ij • * • j %/2) G F 2 fe with t + 2k = n/2. Let 

L = {c-X„ /2 | ceFf, urf(c) >m}. (16) 

For 1 < fc < s, let Hfc be a nonempty set of 2fc-variable bent functions with algebraic degree 
max(fc, 2) and 

T k = {c • X' t 8 M^'fc) I c 6 F|, wt(c) > m} (17) 

where h c G 77^. Set 

r = IJ r *- ( 18 ) 

fc=0 

Denote by any injective mapping from F^ 2 to F. Then for {Y n / 2 . X n / 2 ) G F^ 2 x F^ 2 we 
construct the function / G B n as follows: 

f(Y n/2 ,X n/2 )= y n b /2 -0(&). (19) 



beF: 



,/2 



Remark 1: 

1) For Inequality (fro]) holds, we have 

|r|-^|r fe |>2"/ 2 . (20) 

fe=0 

Due to this we can find an injective mapping ip. 

2) All the functions in T are partially linear functions and each is a set of disjoint spectra 
functions. 

Theorem 1: Let / G ¥ 2 be as in Construction 1. Then / is an almost optimal (n,m,d, Nf) 
function with 

s 

Nf > 2"" 1 - 2"/ 2 - 1 - ^(a fe • 2"/ 2 -' £ - 1 ) (21) 
fe=i 

and 

d < n/2 + max{2, max{fc | a k ^ 0, fc = 1, 2, • • • s}}. (22) 
Proof: For any (/3, a) G F^ 2 x F^ 2 we have 

(y»/ 2 ,x„ /2 )eF5 

= (-l)' 3 ' 6 V" (_ 1 )ffb(^„/ 2 )ea-X„ /2 

b€F™ /2 X„ /2 £Fj /2 



= £ (-irw s » 

b G F™ /2 

= E E (-l)^ 6 W- Sb (a) (23) 



fc=0 *(i>)er t 



Let < fc < s. Any gj, G is a partially linear function. From (I14p . we have 

VF 96 (a)G{0,±2"/ 2 - fc }. 
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Let 

A k = T k n {0(6) | b e F^ 2 }. (24) 
Since (|15p holds, there exists an injective mapping </> such that 

£w -£(•?). < 25 > 

fc=l i=l V / 

From Lemma 3, Tfc is a set of disjoint spectra functions. Noting (|10[) . if 0, then we have 

(-lf' b W gb (a) S {0,±2"/ 2 ~ fc }. (26) 



If Ai. = 0, then we have 



]T (-l)^(«) = 0. (27) 



Combining (gS]), (USD, and ([27]), we have 

S 

\W f ((3,a)\ <2"/ 2 +^a fc -2"/ 2 - fe (28) 



fe=i 

where 

if A k 



ak = { 1 ifA fc ^0. ^ 

From ((3]), Inequality (|2"Tj) holds. From Definition 2, / is almost optimal. 
Note that the algebraic degree of any function in Ti is 2. Hence, when 

max{fc a k ^ 0, k = 1, 2, • • • s} = 1 (30) 

e? < n/2 + 2 where the equality holds if and only if \Ai\ is odd. Note that the algebraic degree of 
any bent functions on F| can reach k when k > 2. So <i can reach n/2 + k' when k' > 2 and L4^/ 
is odd, where 



fc' = max{fc | a k ^ 0, fc = 1,2,- • -s}. (31) 



Any g;, G T, 6 G F^ 2 , is an m-resilient function, where gb(X n /2) = 0(6)- From Lemma 2, / is 
an m-resilient function since it is a concatenation of m-resilient functions. □ 
Remark 2: 

1) The nonlinearity of the resilient functions constructed above is always strictly greater than 
2ii-i _ 2™/ 2 . For reasonable fixed n and m, the nonlinearity of the constructed functions is always 
greater than that of the known ones except some functions on small even number of variables. 

2) Let m be the maximum number such that Inequality (|15[) holds. Roughly speaking, m/n 
tends to 1/4. 

Example 1: It is possible to construct a (16, 1, 10, 2 15 — 2 7 — 2 5 ) function. 

Note that s = [_(n - 2m - 2)/4j=3. For 1 < k < 3, let X' B _ 2k = (xi, ■ ■ ■ , a: 8 _ 2 fc) G F 2 ~ 2fe and 
X 2k = (^8-2^+1, • • • , #8) £ FfA Let -^8 = (Ag_ 2fc ,X 2 ' fc ) G F|. We construct four sets of disjoint 
spectra functions as follows: 

r = {c-X$ | wt(c) > l,c€F|}. 

For 1 < k < 3, 

n = {c ■ x' s _ 2k e h c (x^ k ) | wt(c) > i, c g F«- 2fc } 

where h c G iffc. We have 

|r fc | = 8 f;7 8 ". 2fc ), o<fc<3. 



i=2 
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Notice that 

|r | + |r 2 | = 258 >2 8 , 

it is possible to establish an injective mapping <f> from F| to 5ft, where 5ft = ro U r 2 . Then for 
(Y S ,X S ) e F| x F| we construct the function / G S 16 as follows: 



f(Y 8 ,X 8 ) = 0^.^). 



From (HH1), for any (/3, a) G F| x F|, we have 



max |W>(/3, a)| < ]T ]T |W s (a)| = £ max |W s (a)| = 2 8 + 2 6 

fcu^ JS;^ 

By dU), we have 

iV/ > 2 15 - 2 7 - 2 5 . 

Note that the partially linear function in r 2 can be denoted by g = c ■ X' 4 © h c (X") where h c is a 
bent function on F^. Since the algebraic degree of h c {X") can reach 2, deg(f) can reach 8+2=10. 
So it is possible to obtain a (16, 1, 10, 2 15 - 2 7 - 2 5 ) function. 

5 Degree Optimization 

Let 

{ii, ■ ■ ■ , i m +i} U {i m+2 , • • • , in/2} = {!,•••) ™/2}. 

The algebraic degree of any (n,m,d, Nf) function / obtained in Construction 1 can be optimized 
by adding a monomial Xi m+2 ■ ■ -x,i n/2 to one function g G T with 4>^ 1 {g) ^ 0, where g can be 
denoted by 

9 = x ii © ' ' ' © © fo( x i m +2 j ' ' ' j a 'i„/2 ) ■ (32) 

It is not difficult to prove that Nf G {Nf, Nf — 2 m+1 }, where Nf is the nonlinearity of the degree- 
optimized function /'. To optimize the algebraic degree of / and ensure that Nf> = Nf, we below 
propose an idea to construct a set of disjoint spectra functions T' including a nonlinear function 

9 9 © x i m +2 ' ' ' x i n /2 ■ 

Construction 2: Let n > 12 be an even number, m be a positive number, and (ai, • • • ,a s ) G F 2 
such that 

W 2 \ on/2-m-l , 1 , /„ nil -2k 



E -2»/— + 1 + £ U- £ .-)]> 2 n/ 2 (33) 

v j =m +l \ J / J k=l \ j=m+l ^ J 

where s = |_(Vi — 2m — 2)/4j . Let 



S = {c \ c = (ci, • • ■ ,c„/ 2 ) S F 2 l/2 ,u;i(c) > to, (ci 15 • • • ,Cj m+1 ) = (1 • • • 1)}. (34) 

Let 

9'( X n/2) = c' ■ X n/2 © a; im+2 a; im+ 3 • • • ^ n/2 (35) 

where c' G S*. For 1 < k < s, is defined as in Construction 1. And we modify the To in 
Construction 1 as follows: 

To = W(X n/2 )} U {c • X n/2 \c G F 2 l/2 , wt(c) >m,ci S}. (36) 

Set 

r' = r[ ) uriu---ur s . (37) 
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Denote by <f>' any injective mapping from F 2 to V such that </>' 1 (g c ') 0- The function /' £ B„ 
is constructed as follows: 



f'(Y n/2 ,X n/2 ) = Y^-cp'Q}). (38) 



6gf: 



,/2 



Theorem 2: The function /' e F 2 proposed by Construction 2 is an almost optimal (n, m, n — 
m — 1, -/V/') function with 

jty > 2™" 1 - - a k • 2™ /2 - fe " 1 . (39) 

fc=i 

Proof: f is an m-resilient function since it is a concatenation of m-resilient functions. 
Let gb(X n/2 ) = 4>'{b) eT',be F 2 /2 . From the proof of Theorem 1, for any (/?, a) G F 2 /2 x F 2 /2 , 
we have 

Wj,{fi,a)= E ("irW 9 »+E E (" 1 ) /J " 6 ^(«)- ( 4 °) 



«(i>)er(, k=l ♦Wer t 

, ,„»l/2 help™/ 2 



Let d = (c[, • • • , c^y 2 ) e F 2 ^ 2 and a = (ai, • • • , a„/2) £ F 2 ^ 2 . We have 
W>(a)= E (-l) (c ' +a) - X " /2e3;i "«+ 2 - x >'^ 

2 n/2 _ ym+2 jf a = c ' 

±2 m + 2 if a ^ c' and 6» = 5 (41) 

if a ^ c' and 6> ^ 5. 

where <5 = (c^,--- ,c- m+1 ) and 6 = (a iir -- ,a lm+1 ). Let gb{X n/2 ) = G T', 6 e F 2 /2 . When 
<?6 G Lq and gi, — c ■ X n / 2 ^ <?', we have 

W» («) = lltl (42) 

From (|36|) . if a ^ c' and (a^ , • • • , OLi m+x ) = (1 • • • 1), then a ^ c. Obviously, Tq is a set of disjoint 
spectra functions. So we have 

E (-l) /3 ' 6 W ff6 (a) G {0,±2 m+2 ! ±(2"/ 2 -2 m+2 ),±2"/ 2 }. (43) 

«(i>)er' 

Let Aft = Tfc n {0(6) | 6 G F 2 ^ 2 }. Similarly to the proof of Theorem 1, for any (ft, a) G FJ, we have 

s 

|W>/(/3,o)| < 2"/ 2 + ^a fc •2™/ 2 - fe 
fc=i 

where 

, if A* = 

afc ~ 



1 ifA fe ^0. 

From (HI, Inequality (39) holds and /' is obviously almost optimal. For the existence of g' , 
deg(f') = n — m — 1. □ 
Remark 3: 

1) Apparently, the idea above to obtain degree-optimized resilient functions is firstly considered 
by Pasalic [17]. 

2) A long list of input instances and the corresponding cryptographic parameters can be found 
in Table 1 and Table 2. In Table 2, the entries with "*" represent the functions that can not be 
degree optimized via Construction 2 on the premise of that Nf> = Nf . 
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Tabic 1: Existence of Almost Optimal (n, m, n — m — l,Nf) functions (1 < m < 4) 



vn 


n 


i\fi 






12 < n < 20 


2?i — 1 2*1/ 2 — 1 ^tt. / 4— I - 3_ 4 






24 < n < 112 


2^—i 2 n /2 — 1 2 n /4+2 ^ 






116 < n < 132 


2^—1 2 n /2 _ i 2 n /4+2 2 n /4+i ^ 




n=0 
{modi) 


n = 136 
14(1 < ii < 4Q9 

±4:U ^ It ^±0^ 
Add . . CIO 

496 < n < 512 


2«— 1 _ 2^/2—1 _ 2 n /4+2 _ 2^/4+1 _ 2 n /4 _ 4 
2^i—i 2 n /2 — 1 2 n /4+3 ^_ 

2 n ~ 1 — 2 n / 2— 1 — 2 n / 4 + 3 — 2 n / 4 + 1 — 4 






14 < n < 50 


O^— 1 nn/2— 1 o(?i+fc>)/4 /i 






54 < n < 58 


on— 1 on/2 — 1 o(n+6)/4 o(n+2)/4 a 






62 < n < 238 


2n— i 2 n / 2_1 2( n + 10 )/ 4 4 




n=2 
{modi) 


242 < n < 246 

250 < n < 290 
294 < n < 298 


2 n ~ 1 — 2 n /2-i _ 2t n + 10 )/ 4 _ 2<>+2)/4 _ 4 
2 n ~ 1 — 2 n /2-i _ 2t n + 10 )/ 4 _ 2( n + 6 )/ 4 _ 4 

2«-i _ 2^/2-1 _ 2( n + 10 )/ 4 _ 2( n + 6 )/ 4 _ 2( n + 2 )/4 _ 4 






n = 16 


2 n_1 — 2 n / 2— 1 — 2 n / 4 + 2 — 8 






on ^ , /I A 

zl) < n < 4U 


2^-i 2 n /2 — 1 2 n /4+3 g 






n = 44 


on-1 o^/2-l o^/4+3 o«/4+2 o 
z — Z ' — Z 1 — L 1 — o 


2 


n=0 
{modi) 


48 < n < 84 
n = 88 

no .. . n^i 
92 < n < 96 

1UU s n \ i(D 


2n-l _ 2^/2 — 1 _ 2 n /4+4 _ g 
on-1 on/2 — 1 on/4+4 on/4+2 o 

Zi Zi Zi Zi o 

on— 1 on/2 — 1 on/4+4 on/4+3 o 
z — Z' — Z' — Z' — o 

on — 1 on/2 — 1 on/4+5 o 
Z — Z' — Z' — o 






in ^ ^ 0£! 

18 < n < 26 


on— 1 on/ 2 — 1 o(n+l())/4 o 
Z — Z ' — Z v y/ — o 




n=2 
{modi) 


30 < n < 58 


on— 1 on/2 — 1 ofn+14)/4 o 
z — z ' — Z v y/ — o 




62 < n < 66 
70 < n < 122 


2 n ~ 1 — 2 n / 2_1 — 2( n + 14 )/ 4 — 2( n + 10 )/ 4 — 8 
2 n ~ 1 — 2 n / 2_1 — 2( n + 18 )/ 4 — 8 






n = 20 


2^—1 2 n / 2— i 2 n / 4 +3 2 n / 4 + 2 26 






Z^± \ it \ oz 


2^—i _ 2 n / 2 ~i _ 2 n /4+4 






n = 36 


on— 1 on/2— 1 on/4+4 on/4+3 if? 

Z Z Z Z .L U 






40 < n < 56 


on — 1 on/2 — 1 on/4+5 i z 1 i z 1 

z — Z ' — z ' — lo — lo 




n=0 
{modi) 


n = 60 
64 < n < 88 
n = 92 


— i 2^/ 2 — i 2^ 1 / 4 ~t~^ 2^^ 4+4 ^ q 
2*i — i 2* 1 / 2 — i 2^/4+6 
2*i—i _ 2*V 2 -i _ 2 n / 4 + 6 — 2 n / 4 + 4 — 16 


3 




n = 96 
inn < ti < MA 


2*i—i 2 n / 2— i 2 n / 4 +6 2 n / 4 +5 16 

2 n— i 2 n / 2— i 2 n / 4 +''' — 16 






oo ^ . , ^ o^ 

zz <- n <. zD 


on— 1 on/2-1 o(n+14)/4 

Zi Z Z J-D 






OA / ^ A O 

30 < n < 4^ 


on-l on/2-1 o(n+18)/4 a a 
z — Z ' — z v ;/ — 10 






ra = 46 


on-l on/2-1 o(n+18)/4 o(n+14)/4 a a 




n=2 
{modi) 


52 < n < 70 
n = 74 
n = 78 

82 < n < 114 


on-l on/2-1 o(n+22)/4 a a 
z — z ' — z v ;/ — 10 

2n-l _ 2n/2-l _ 2(n+22)/4 _ 2(n+18)/4 _ -^g 
2n-l _ 2?i/2-l _ 2(n+22)/4 _ 2(n+18)/4 _ 2(n+14)/4 _ 
2?i-l _ 2n/2-l _ 2(n+26)/4 _ ^g 






28 < n < 32 


071 — 1 on/2 — 1 on/4+5 oo 
z — Z 1 — £ 1 ^ — oz 






36 < n < 48 


2 n — 1 2 n /2 — 1 2 n /4+6 32 






£0 

n = oz 


2n — 1 2n/2 — 1 2n/4+6 2n/4+5 32 




n=0 
{modi) 


56 < n < 68 

n = 72 
76 < n < 100 


On— 1 on/2 — 1 on/4+7 on 
Z — L 1 — Z 1 ' — 6Z 

2n-l _ 2»i/2-l _ 2n/4+7 _ 2 n /4+5 _ 2n/4+4 _ 32 
2 n — 1 2 n /2— 1 2 n /4+8 32 






n = 26 


2»i— 1 _ 2 n /2 — 1 _ 2(,n+18)/4 _ 32 


4 




n = 42 


2n-l _ 2n/2-l _ 2(n+22)/4 _ 32 
on-l on/2-1 o(n+22)/4 o(n+18)/4 00 

Z Zi Z •)_ 




n=2 
{modi) 


46 < n < 58 


2"-i _ 2™/ 2 - 1 — 2(™+ 26 )/ 4 — 32 




n = 62 
66 < n < 82 

n = 86 

n = 90 
94 < n < 118 


2n-l _ 2n/2-l _ 2(n+26)/4 _ 2<n+22)/4 _ 32 
2?i-l _ 2n/2-l _ 2(n+30)/4 _ 32 
2n-l _ 2»i/2-l _ 2<n+30)/4 _ 2(n+22)/4 _ 2(n+18)/4 _ 2(n+14)/4 _ 32 
2n-l _ 2»i/2-l _ 2(n+30)/4 _ 2(n+26)/4 _ 2(n+22)/4 _ 32 

2"-i _ 2™/2-i _ 2(™+ 34 )/ 4 _ 32 
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Table 2: (n, m, n — m — 1, Nf) functions (m > 5)which were not known earlier 



(30, 5, 24, 2 29 - 2 14 - 2 13 ) 
(38,5,32,2 37 - 2 18 - 2 16 ) 
(44, 5, 38, 2 43 - 2 21 - 2 18 - 2 6 )* 
(54, 5, 48, 2 53 - 2 26 - 2 21 - 2 6 )* 
(60,5,54,2 59 - 2 29 - 2 23 - 2 6 )* 
(70, 5, 64, 2 69 - 2 34 - 2 26 - 2 6 )* 
(76, 5, 70, 2 75 - 2 37 - 2 28 - 2 6 )* 
(84, 5, 78, 2 83 - 2 41 - 2 30 - 2 6 )* 
(90,5,84,2 89 - 2 44 - 2 32 - 2 6 )* 
(98, 5, 92, 2 97 - 2 48 - 2 34 - 2 32 - 2 6 )* 



(36, 5, 30, 2 35 - 2 17 - 2 15 - 2 6 )* 
(42, 5, 36, 2 41 - 2 20 - 2 17 - 2 14 - 2 6 )* 

(48,5,42,2 47 - 2 23 - 2 19 - 2 6 )* 
(58,5,52,2 57 - 2 28 - 2 22 - 2 21 - 2 6 )* 

(64, 5, 48, 2 63 - 2 31 - 2 24 - 2 6 )* 
(74, 5, 68, 2 73 - 2 36 - 2 27 - 2 24 - 2 6 )* 

(80,5,74,2 79 - 2 39 - 2 29 - 2 6 )* 
(88, 5, 82, 2 87 - 2 43 - 2 31 - 2 30 - 2 6 )* 
(94, 5, 88, 2 93 - 2 46 - 2 33 - 2 6 )* 
(100, 5, 94, 2" - 2 49 - 2 35 - 2 6 )* 



(34, 6, 27, 2 23 - 2 16 - 2 15 ) 
(42,6,35,2 41 - 2 20 - 2 18 ) 
(52,6,45,2 51 - 2 25 - 2 22 ) 
(60, 6, 53, 2 59 - 2 29 - 2 24 - 2 7 )* 
(66, 6, 59, 2 65 - 2 32 - 2 26 - 2 7 )* 
(76, 6, 69, 2 75 - 2 37 - 2 29 - 2 7 )* 
(82,6,75,2 81 - 2 40 - 2 31 - 2 7 )* 



(40,6,33,2 



(90,6,83,2 



,89 



2 44 _ 2 33 _ 2 



o32 



,7\* 



(96, 6, 89, 2 95 - 2 47 - 2 35 - 2 7 )* 



2 7 ) 



(38,7,30,2 3Y -2 18 -2 iY -2 i,:i ) 
(46,7, 38,2 45 - 2 22 - 2 20 ) 



(48,6,41,2 47 - 2 23 - 2 20 - 2 7 )* 
(54,6,47,2 53 - 2 26 - 2 22 - 2 7 )* 
(64, 6, 47, 2 63 - 2 31 - 2 25 - 2 24 - 2 7 )* 

(70,6,63,2 69 - 2 34 - 2 27 - 2 7 )* 
(80, 6, 73, 2 79 - 2 39 - 2 30 - 2 29 - 2 7 )* 
(86,6,79,2 85 - 2 42 - 2 32 - 2 7 )* 
(92,6,85,2 91 - 2 45 - 2 34 - 2 7 )* 
(100, 6, 93, 2" - 2 49 - 2 36 - 2 35 - 2 7 )* 



(40,7,32,2 39 - 2 i9 -2 18 ) 
(48,7,40,2 47 - 2 23 - 2 21 ) 
(54, 7, 46, 2 53 - 2 26 - 2 23 ) 
(60,7, 52,2 59 - 2 29 - 2 25 - 2 8 )* 
(66, 7, 58, 2 65 - 2 32 - 2 27 - 2 8 )* 
(72,7, 64,2 71 - 2 35 - 2 29 - 2 8 )* 
(78,7, 70,2 77 - 2 38 - 2 31 - 2 8 )* 
(86, 7, 78, 2 85 - 2 42 - 2 33 - 2 32 - 2 8 )* 
(92,7, 84, 2 91 - 2 45 - 2 35 - 2 8 )* 
(100, 7, 92, 2" - 2 49 - 2 38 - 2 8 )* 



(52, 7, 44, 2 51 
(58,7, 50, 2 57 
(64, 7, 46, 2 63 
(70,7, 62, 2 69 



. 2 25 

2 28 

2 31 
2 34 



(76, 7, 68, 2 73 
(82, 7, 74, 2 81 
(88, 7, 80, 2 87 
(98, 7, 90, 2 97 



2 22 _ 2 21 _ 2 8y 
2 24 _ 2 23 _ 2»y 
2 26 _ 2 25 _ 2 »y 
2 28 _ 2 27 _ 2 &y 

- 2 37 - 2 30 - 2 8 )* 

- 2 40 - 2 32 - 2 8 )* 

- 2 43 - 2 34 - 2 8 )* 

- 2 48 - 2 37 - 2 8 )* 



33, 2 41 - 2 2U - 
41,2 49 - 2 24 - 
49, 2 57 - 2 28 - 
59, 2 67 - 2 33 - 
63, 2 71 - 2 35 - 
69, 2 77 - 2 38 - 
79, 2 87 - 2 43 - 
85, 2 93 - 2 46 - 
,91,2"-2 49 



2 i9 -2 i8 ) 

2 22 _ 2 2lj 

2 25 _ 2 9y 
2 25 _ 2 29) 
2 30 _ 2 9)* 
2 32 _ 2 9)* 
2 35 _ 2 9)* 
2 37 _ 2 9)* 

- 2 39 - 2 9 )* 



(44, 8, 35, 2 43 - 2 21 - 2 20 ) 
(52, 8, 43, 2 51 - 2 25 - 2 23 ) 
(64, 8, 45, 2 63 - 2 31 - 2 27 - 2 9 )* 
(70, 8, 61, 2 69 - 2 34 - 2 29 - 2 27 - 2 9 )* 
(76, 8, 67, 2 75 - 2 37 - 2 31 - 2 28 - 2 9 )* 

(82,8,73,2 81 - 2 40 - 2 33 - 2 9 )* 
(92, 8, 83, 2 91 - 2 45 - 2 36 - 2 35 - 2 9 )* 
(98, 8, 89, 2 97 - 2 48 - 2 38 - 2 36 - 2 9 )* 
(200, 8, 191, 2 199 - 2" - 2 68 - 2 9 )* 



(42,8, 
(50,8, 
(58,8, 
(68,8, 
(72,8, 
(78,8, 
(88,8, 
(94,8 
(100,8 



2"^-2 



TTT 



(46,9,36,2 4b - 2 22 - 2 

(54, 9, 44, 2 53 - 2 26 - 2 24 - 2 23 - 2 22 ) 
(62,9,52,2 61 - 2 30 - 2 27 - 2 26 ) 
(68, 9, 58, 2 67 - 2 33 - 2 29 - 2 28 - 2 27 - 2 10 )* 
(74, 9, 64, 2 73 - 2 36 - 2 32 
(80,9,70,2 79 - 2 39 - 2 34 - 2 10 )* 
(88, 9, 78, 2 87 - 2 43 - 2 36 - 2 10 )* 
(98, 9, 88, 2 97 - 2 48 - 2 39 - 2 38 - 2 10 )* 



(48,9,38,2 47 - 2 23 - 2 22 ) 
(56,9,46,2 55 - 2 27 - 2 25 ) 
(64, 9, 44, 2 63 - 2 31 - 2 28 ) 
(70,9,60,2 69 - 2 34 - 2 30 - 2 10 )* 
(76, 9, 66, 2 75 - 2 37 - 2 32 - 2 10 )* 
(82,9,72,2 81 - 2 40 - 2 34 - 2 10 )* 
(94,9,84,2 93 - 2 46 - 2 38 - 2 10 )* 
(100, 9, 90, 2" - 2 49 - 2 40 - 2 10 )* 



(52, 10,41, 2 51 - 2 25 - 2 24 ) 

(66,10,55,2 65 -2 32 -2 29 -2 28 -2 27 -2 26 -2 25 -2 11 )* 

(74, 10, 63, 2 73 - 2 36 - 2 32 - 2 30 - 2 11 )* 
(80, 10, 69, 2 79 - 2 39 - 2 34 - 2 33 - 2 11 )* 
(84, 10, 73, 2 83 - 2 41 - 2 36 - 2 11 )* 
(88, 10, 77, 2 87 - 2 43 - 2 37 - 2 11 )* 
(94, 10, 83, 2 93 - 2 46 - 2 39 - 2 11 )* 
(100, 10, 89, 2" - 2 49 - 2 41 - 2 11 )* 



(60, 10, 49, 2 59 - 2 29 - 2 27 ) 
(68,10,57,2 67 - 2 33 - 2 30 ) 
(76, 10, 65, 2 75 - 2 37 - 2 33 ) 
(82,10,71,2 81 - 2 40 - 2 35 - 2 n ) 
(86, 10, 75, 2 85 - 2 42 - 2 36 - 2 35 - 2 34 



(100, 21, 78, 2" - 2 49 - 2 48 ) 
(184, 38, 145, 2 183 - 2 91 - 2 89 - 2 87 - 2 86 ) 
(83 2, 200, 631, 2 831 - 2 415 - 2 414 - 2 413 ) 



2 11 )* 

,37 _ 2 36 _ 2 35 _ 2 11^)* 

(98, 10, 87, 2 97 - 2 48 - 2 40 - 2 39 - 2 38 - 2 11 )* 
(500, 10, 489, 2 499 - 2 249 - 2 153 - 2 11 )* 



(92, 10, 81, 2 91 - 2 45 - 2 38 - 2 



(200, 45, 154, 2 199 - 2" - 2 98 ) 
(516, 116, 399, 2 515 - 2 255 - 2 253 ) 
(10000, 2475, 7524, 2 9999 - 2 4999 - 2 4998 - 2 4997 - 2 4996 ) 
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6 Improved Version of the Main Construction 

Both constant functions and balanced Boolean functions are regarded as O-resilient functions. The 
Boolean functions that are neither balanced nor correlation-immune are regarded as (—1) -resilient 
functions (e.g. bent functions). 

Lemma 4 : With the same notation as in the Definition 4, if h c is a w-resilient function, then g c 
is a (wt(c) + u)-resilient function. 

Proof: Let a GF' and I = c • X[. It is not difficult to deduce that W 9c (a) = Wi (a^ , • • • , a» t ) • 
W hc (a it+1 ,- ■ ■ ,a ip ). When w^a^,- ■ ■ ,a it ) < wt(c), Wi(a^,- ■■ ,a it ) = 0. From Lemma 1, for h c 
is a w-resilient function, we have 

W hc (a it+1 , ■ ■ ■ ,a ip ) = 0, for wt(a it+1 ,-- ■ ,a ip ) < v. 

Obviously, W 3c (a) = when wt(a) < wt(c) + v. From Lemma 1, g c is a (wt(c) + w)-resilient 
function. □ 

Construction 3: Let n > 12 be an even number, to be a positive number, efc be a nonnegative 
number with < < k + 1, and afc G F 2 (fc = 1, • • • , L"/4J) such that 




Let X n/2 = (a;!,.. - ,a; n/2 ) G F 2 /2 , ^ - (jci,--- .a*) G F* and X 2 ' fe = {x t+1 ,--- ,x n/2 ) G Ff, 
where t + 2k = n/2. Let 

fi = {c • X Il/2 | c G F™ /2 , iut(c) > m}. (45) 

For 1 < k < [n/4:\ and < < m + 1, let Rk be a nonempty set of nonlinear (2k, et — 1, —,Nh k ) 
functions with high nonlinearity and 

O fe = {c • X' t © fc c (*2fc) I c G F 2 , «rt(c) > m - e fe } (46) 

where /i c G i?fc. Set 

L«/4J 

o= |J n fc . (47) 

fc=0 

Denote by <p any injective mapping from F 2 ^ 2 to 17 such that there exists an (n/2, m, n/2 — 
to — 1, 7V g J function gj, G O with <£ _1 (<?&) 7^ • We construct the function / G £>„ as follows: 

/(r„/2,^n/2)= 1^/2 •¥>(&) (48) 

Theorem 3: If / G S„ is proposed by Construction 3, then / is an almost optimal (n, m, n — 
to — l,Nf) function with 

Ln/4J 

JV> > 2™- 1 - 2"/ 2 - 1 - ( 0fc • 2"/ 2 - 2fc • (2 2fe - 1 - JV h J). (49) 
fe=i 

Proof: For any (/3, a) G F 2 ^ 2 x F 2 ^ 2 we have 

W>(/?,a) = E E M)^^) (50) 

fe=0 «b)Er t 

Let 

A fc = n {0(6) I b G F 2 /2 }. (51) 
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Note that each fifc (k = 0, 1,- • • , 1^/4]) is a set of disjoint spectra functions. Similarly to the proof 
of Theorem 1, we obtain 



\W f {(3, a)\ < 2 n ' 2 + «fe ' 2"/ 2 - 2fe • (2 2k - 2N hk ) (52) 

where 

_ r o ifA fc = 

afe "\ 1 if A fc ^0. 

From ©, Inequality holds. 

From Lemma 4, all the functions in f2 are m-resilient functions. Due to Lemma 2, / is an 
m-resilient function. For the existence of a degree-optimized function gi, G Q with <p~ 1 (gb) ^ 0, we 
have deg(f) = n — m — 1. □ 

Fixing n and m, we can also obtain lots of degree-optimized resilient functions whose nonlin- 
earity are better than that of functions constructed by Construction 1. See the following example. 

Example 2: It is possible to construct a (28, 1, 26, 2 27 - 2 13 - 2 8 - 2 6 ) function. Let 

n = {c-X' t | c G F* 4 , t«t(c) > 2} 

and 

r! 5 = {c • Y^ © M^i'o) I c G F 4 , h c G i? 5 } 

where i?5 is a nonempty set of (10,1,8,492) functions [8]. Note that |f2o| = 16369, |f2s| = 16. For 
16369 + 16 > 2 14 , it is possible to select 2 14 many 14-variable 1-resilient functions from fio U S7s. 
We concatenate these functions and obtain a (28, 1, 26, 2 27 — 2 13 — 2 8 — 2 6 ) function. 

Similarly, one can obtain the following resilient functions: (36, 3, 32, 2 35 -2 17 -2 13 ), (42, 5, 36, 2 41 - 
2 20 _ 2 i7 _ 2 U) j ( 66) io, 55, 2 65 - 2 32 - 2 29 - 2 28 - 2 27 - 2 26 - 2 25 ), (86, 4, 81, 2 85 - 2 42 - 2 29 - 2 27 - 
2 26 _2 18 -2 14 -2 13 -2 5 ), etc. 

7 Conclusion and an Open Problem 

In this paper, we described a technique for constructing resilient functions with good nonlinearity 
on large even number variables. As a consequence, we obtained general constructions of functions 
which were not known earlier. 

Sarkar and Maitra [23] have shown that the nonlinearity of any (n, m,n — m — 1, Nf) function 
(m < n — 2) is divisible by 2 m+2 . And they have deduced the following result: If n is even, and 
m < n/2 — 2, then Nf < 2" _1 — 2™/ 2-1 — 2" l+1 . But we suppose that this upper bound could be 
improved. So we propose an open problem as follows: 

Does there exist n- variable (n even), m-resilient (m > 0) functions with nonlinearity > 2 n_1 — 
2 n/2-i _ 2 L«/4j+m-i7 jf ^jjgj-g d oeSj how to construct these functions? 

Conjecture: Let n > 12 be even and m < n/2 — 2. For any (n, m, — , Nf) function, the following 
inequality always holds: 

N f < 2"" 1 - 2™ 72 " 1 - 2 L " /4j+m " 1 . (53) 
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